Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/heBRPG44Q4cvT67VApuNiJAyPk0.roa
File: heBRPG44Q4cvT67VApuNiJAyPk0.roa (raw, json)
Hash identifier: HLNSHxlpIbJBf7mq+j3LAfovJ158BGIWYVKjdTKCJH8=
Subject key identifier: 85:E0:51:3C:6E:38:43:87:2F:4F:AE:D5:02:9B:8D:88:90:32:3E:4D
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1B9E1CC2
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/heBRPG44Q4cvT67VApuNiJAyPk0.roa
Signing time: Sat 01 Jan 2022 05:03:40 +0000
ROA not before: Sat 01 Jan 2022 05:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 701
IP address blocks: 176.115.224.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463346882 (0x1b9e1cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85e0513c6e3843872f4faed5029b8d8890323e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:57:a5:2d:22:b2:2e:7c:da:46:ed:2d:57:
f5:4c:bf:37:85:e9:9d:24:c0:12:ed:45:8d:73:81:
c3:df:a7:67:47:bc:0a:b1:b9:af:54:9e:8e:ea:c5:
46:86:89:4c:3b:8b:03:90:cc:fa:85:87:37:66:20:
91:c9:fe:e6:e0:ce:95:c4:d3:cf:1e:7d:48:ed:41:
e5:8d:b4:55:e3:f6:e8:99:c6:0e:27:13:97:05:0e:
12:fc:84:2b:0b:9b:e5:47:23:22:17:cf:c6:6f:07:
c7:69:68:0d:52:d0:66:88:fb:b6:63:45:71:6a:e6:
de:3c:45:33:69:94:e9:6f:2f:d6:80:08:52:2d:91:
fc:eb:52:54:cf:25:7c:20:f1:47:0d:c2:75:95:cc:
97:0a:fa:61:cf:3a:37:c0:18:6d:67:fa:e0:a5:bf:
5a:8b:48:c8:fa:b3:19:5e:e8:e8:ac:d8:1f:58:5d:
25:bf:37:7a:2e:75:09:ab:a4:11:3c:bb:b8:b3:b6:
67:f0:dc:07:98:9d:d8:50:22:54:88:f8:f8:a7:3e:
bb:03:27:68:81:2d:73:99:c5:d6:5c:ae:fc:12:37:
69:89:e0:d6:51:e7:cb:8b:fb:bf:bd:98:c9:37:25:
90:2d:c9:b3:e1:b5:07:f9:de:ed:2f:44:ab:7a:75:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E0:51:3C:6E:38:43:87:2F:4F:AE:D5:02:9B:8D:88:90:32:3E:4D
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/heBRPG44Q4cvT67VApuNiJAyPk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.224.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:10:54:a3:42:90:af:db:38:1a:3f:56:71:32:e0:06:4b:f1:
01:db:18:d7:9a:56:7e:ce:d5:cc:77:35:51:75:65:6a:57:a8:
a6:05:fe:a4:cd:0c:2d:0d:44:aa:be:24:f1:0f:0f:19:23:c2:
82:36:30:f4:6e:89:60:f3:18:0f:c1:56:73:02:1e:6e:19:a5:
3e:07:ca:fb:76:fd:ae:e8:53:24:a6:9e:ec:c8:e7:0c:40:56:
ae:6b:76:8a:a3:7f:a0:9a:d6:cc:fc:8c:f1:4b:0c:5b:db:3d:
37:d7:a2:4b:34:26:af:74:37:d0:b4:25:f4:ac:47:33:f7:ac:
13:a2:84:66:fa:68:0e:e9:ab:df:fc:8b:d5:02:c6:9c:1a:de:
20:b1:96:b3:8a:5a:b0:ae:e5:99:d8:49:01:b9:2c:32:74:4f:
25:ad:7d:3d:31:9a:1e:a1:83:df:42:cb:a3:0c:ac:fa:02:3c:
d5:8d:26:d4:db:fd:27:85:87:4d:ee:88:84:04:37:e2:59:4d:
21:90:c5:68:09:8f:90:bc:a7:40:9b:5a:65:02:37:f4:0f:3b:
1f:b6:31:c7:3a:72:6f:f0:9b:c6:fb:6a:56:09:55:5b:00:6d:
58:e1:b2:99:08:37:ad:57:8c:5c:6a:8f:2f:92:5e:d6:3a:a7:
b4:4e:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org